CN103136830A - Communication-free hopping code generation method of access control system - Google Patents

Abstract

The invention discloses a code-hopping generation method for an access control system without communication, comprising a code-hopping terminal and an access controller, one code-hopping terminal corresponds to several access controllers, and the access controller controls one or several access terminals; wherein the code-hopping terminal is installed Code hopping generation program, which contains a set of non-linear algorithms for generating code hopping and an encryption algorithm call rule table corresponding to the access controller, each time period corresponding to each access controller algorithm is different; where the access controller In the decryption program, there is a decryption algorithm calling rule table corresponding to the code-hopping terminal and a set of non-linear algorithms for password decryption. The algorithm of each period is consistent with the algorithm of the code-hopping terminal; the invention performs corresponding access control terminal according to the comparison result Authorization, the code-hopping terminal has no communication connection with the access control controller, so that the access control controller does not have repeated passwords at different times.

Description

Hopping code generation method for access control system without communication

technical field

The invention relates to a method for generating a code for an access control system, in particular to a method for generating a hopping code for an access control system without communication.

Background technique

Code hopping technology, also known as rolling code technology, is an encryption technology that uses complex nonlinear encryption algorithms to realize encoding. It is characterized by multiple changes in encoding, anti-interception, safety and reliability, and strong ability to prevent attacks and illegal intrusions. At present, the code-hopping technology is mainly used in the remote control keyless entry control system of the automobile industry, and the code-hopping technology is used to open and close the car door by transmitting wireless signals. The code hopping technology uses hardware technology to make the password sent by the key unique and random each time. The intruder cannot predict it. Even if the original unlock password is recorded, it cannot be used for the next unlock, so the security is extremely high. The access control system mainly uses RFID (radio frequency) cards, biometrics, network control and password technologies. When RFID cards are used, unauthorized access is easy to occur when the card is lost, and remote temporary authorization cannot be achieved; biometrics cannot achieve remote temporary authorization; although network-controlled access control can facilitate remote temporary authorization, but It cannot be used in scattered places where it is not easy to establish a communication network; and the access control system of cryptographic technology, because the password is relatively fixed, is not suitable for multiple people to use, and it is more prone to confidentiality incidents. Therefore, for some decentralized access control systems, it is very necessary to design a method for generating access control hopping codes without communication. For example, in the power system, the distribution of substations is often relatively scattered. The door locks of the gates, control rooms, and switch control rooms usually use mechanical locks. All kinds of personnel need to enter and exit the substation frequently, and must go back and forth to the centralized control center station to retrieve and return. Keys, the time to retrieve and return the keys is much longer than the on-site working time. Access control code hopping technology can realize temporary authorization of various personnel, ensure the normal working hours of various personnel, and prevent the use of existing passwords to enter and exit the substation at will.

Contents of the invention

The purpose of the present invention is to provide a code-hopping generation method for an access control system that does not require communication. The code-hopping terminal has no communication connection with the access controller, and does not rely on the communication network to realize the non-repeated password of the access controller at different times.

The technical solution of the present invention is: the code hopping generation method of the access control system includes a code hopping terminal and an access control controller, the code hopping terminal is an ordinary PC, a tablet computer or a smart phone, and one code hopping terminal corresponds to several access control controllers, and the access control The controller controls one or several access control terminals; among them, the code hopping terminal is installed with a code hopping generation program. The algorithms of each access controller are different; the decryption program of the access controller has a decryption algorithm call rule table corresponding to the code-hopping terminal and a set of non-linear algorithms for password decryption. The algorithm for each period is the same as that of the code-hopping terminal. The algorithm is consistent;

The code-hopping terminal and the access controller use the current date and time, the serial number of the access controller and the serial number of the code-hopping program as independent variables to calculate the code-hopping of the current period, compare it with the input code-hopping, and make corresponding actions according to the comparison result. Authorization of access control terminals.

When working, the administrator of the access control system selects the corresponding access control controller and terminal number on the code-hopping terminal to generate a jumping code, and informs the personnel entering the station by phone, text message or other means, and the personnel entering the station enter the code jumping through the keyboard on the access control terminal , the access control controller performs operation and decryption confirmation; the access control controller receives the password input by the keyboard, calls the jump code decryption program, and calculates the legitimacy of the jump code; Decryption algorithm calling rules and a set of password decryption algorithms, if the jump code is correct and within the time limit, the access control controller sends an instruction to open the electronically controlled lock through the access control terminal.

The present invention has the following advantages:

1. On a code-hopping terminal that has no communication with the access controller, generate a time-sensitive and non-repetitive password through software, and enter the password on the corresponding access controller to open the door lock. The password algorithm for each access control period They are all different. The password algorithms of the controller and the code-hopping terminal are consistent in the same time period, and both use the current date and time, the access control number and the serial number of the code-hopping generation program as variables, even if the algorithm is repeated. The password will not be repeated, and a jumping code generated by the code-hopping terminal is only valid for a period of time, and there is no need for any communication or other contact methods between the code-hopping terminal and the access controller to realize the decryption and encryption functions of the jumping code.

2. Encryption and decryption of jumping codes use the serial number of the jumping code generation program, the current date and time, and access control controller and terminal number as independent variables. Different access control controllers generate different jumping codes corresponding to different algorithms at different times, even if the The jumping codes generated by the different time period of the forbidden controller or the same forbidden controller are not the same. The code hopping of the access control changes randomly and does not repeat in each time period. The encryption and decryption of the code is realized through a complex nonlinear encryption algorithm. It is only valid for a certain period of time and is suitable for temporary authorization of various types of personnel in various access control systems.

Description of drawings

Figure 1 is a composition diagram of the non-communication jumping code control access control system

Figure 2 is the flow chart of code-hopping terminal encryption

Figure 3 is the flow chart of access control controller decryption

Detailed ways

The present invention will be further described in conjunction with accompanying drawings.

As shown in Figure 1-3, the code hopping generation method of the access control system includes a code hopping terminal and an access control controller. The code hopping terminal is an ordinary PC, a tablet computer or a smart phone. The controller controls one or several access control terminals; among them, the code hopping terminal is installed with a code hopping generation program. The algorithms of each access controller are different; the decryption program of the access controller has a decryption algorithm call rule table corresponding to the code-hopping terminal and a set of non-linear algorithms for password decryption. The algorithm for each period is the same as that of the code-hopping terminal. Algorithms are the same; The code hopping terminal and the access controller use the current date and time, the serial number of the access control controller and the serial number of the code hopping program as independent variables to calculate the hopping code of the current period and compare it with the input hopping code. Authorize the corresponding access control terminal for the result.

Taking the smart phone as an example, the on-duty public mobile phone is handed over to the on-duty administrator for use, and the access control can be authorized anytime and anywhere as needed. The code-hopping terminal has a set of code-hopping generation algorithms and an encryption algorithm calling rule table corresponding to the access controller.

Table 1 Algorithm calling rules for code-hopping terminals

The calculation formula is

i = Fm(Tim,Cid)

Where i is the serial number of the nonlinear encryption algorithm formula, Tim is the current time in the format of yyyymmddhhmm, such as 201212121530 at 15:30 on December 12, 2012; Cid is the serial number of the access control controller, and the range is 01-99.

Each value of i corresponds to a non-linear encryption algorithm formula. The non-linear encryption algorithm formula is based on the current time Tim, the access control controller and access control terminal number CDid, and the code-hopping program serial number Sn. The formula is as follows:

Hcm =ENi (Tim, CDid, Sn) (i=1,2,3...99)

The serial number Sn of the code-hopping program is fixed, mainly to prevent the code-hopping program from being illegally copied and used to generate code-hopping; CDid is the access control controller and access control terminal number, 0100-9999, the first two digits represent the access control controller number, The last two digits indicate the number of the access control terminal corresponding to the access control controller. For example, the second access control number under the access control controller numbered 6 is 0602; the Hcm generated by the encryption algorithm program is the hopping code of the corresponding access control controller. The personnel who need to enter the station will be notified by phone or text message, and the personnel entering the station will enter the jump code Hcm on the keyboard, and the access controller will decrypt it.

The decryption program of the access controller has a decryption algorithm call rule and a set of password decryption algorithms corresponding to the code-hopping terminal.

Table 2 Decryption algorithm call rule table of access controller

The calculation formula is

K = Fs(Tim)

Among them, k is the serial number of the nonlinear decryption algorithm formula, and the meaning of Tim is the same as that of the encryption algorithm; the k value calculated in each period is not completely consistent with the i value calculated by the code-hopping program, but the nonlinear encryption algorithm formula ENi is the same as the nonlinear decryption algorithm The expression of the formula DEk is exactly the same, and the decryption algorithm formula DEk:

Hcc = DEk (Tim, CDid, Sn) (k=1,2,3...99)

The meanings of the independent variables Tim, CDid, and Sn are basically the same as those of the encryption formula ENi; when the calculated Hcc is equal to the input hopping code Hcm, the corresponding access control is opened.

Among them, when the last two digits of the access control number id are 00, it means that this code hopping is common to all the access control terminals corresponding to the access control controller, that is, all door locks in the station can be opened; when the last two digits are 01, only the gate lock can be opened; therefore , when the hopping code is input from the access control keyboard of a certain place, the access control controller must perform two calculations; respectively use the last two digits of the access control number as 00 and 01 to calculate the hopping code of the whole station or the gate, such as using 00 to calculate the hopping code If the hopping code Hcc is equal to Hcm, the access control of the whole station will be opened; if the hopping code Hcc calculated by 01 is equal to Hcm, the gate access control of this station will be opened; other results are illegal data; the timeliness of hopping codes is 10 minutes, exceeding 10 minutes Jump code generated for the new algorithm; jump code input will not be accepted after 5 consecutive wrong inputs every 10 minutes; usually only one access controller needs to be installed in one place, and the controller can control multiple doors through the access control terminal ; The password algorithm of the access controller in each place is different in each time period. The algorithm of the access controller and code-hopping terminal in the same period is consistent, and both of them use date and time as one of the variables, even if the algorithm is repeated. The generated password will not be repeated, and the access control jump code will only be valid for a period of time, which effectively prevents the password from being stolen by others.

The following is a description of a jump code generation method of a substation access control system.

The distribution of substations in the power system is relatively scattered. Usually, a centralized control center is responsible for the operation and maintenance of multiple substations. Various personnel such as daily inspections, operations and construction need to come in and out frequently, so they must go to the centralized control center to continuously retrieve the series of corresponding substations. key; the use of non-communication jumping code access control can facilitate management personnel to authorize personnel who need to enter the substation regardless of time and place; install the access control jumping code generation program on the mobile phone of the centralized control center management personnel; for example, at 9:00 on October 10, 2012 When someone needs to enter the gate of No. 6 substation at 51 minutes, the manager selects the substation and its gate on the mobile phone, which is calculated in the code generation program of the mobile phone

i= Fm(201010100951,06)=27

That is to call the encryption algorithm formula EN27, assuming that the code hopping program serial number of the mobile phone is 526608, then calculate

Hcm=EN27(201010100951,0601,526608)＝473453 After entering the station personnel input jump code on the gate keyboard, the access control controller calculates the serial number of the decryption algorithm formula according to the current time

K = Fs(201010100951) = 3

According to the calling rules of the decryption algorithm, the decryption algorithm formula DE3 is equal to the encryption algorithm formula EN27, and the code hopping is calculated with the total station access control 0600 and the gate access control 0601 respectively

Hcm=DE3＝EN27(201010100951,0601,526608)＝321655 (full station)

Hcm=DE3=EN27(201010100951,0601,526608)=473453 (gate)

The input hopping code matches the gate access control code of this station, and the gate access control is opened; when the input hopping code exceeds 10, the hopping code calculated by the access control controller changes; if the door needs to be opened at this time, it must be managed by the access control system The staff can regenerate the skipping code.

Claims (2)

1. need not the gate control system frame hopping generation method of communicating by letter, it is characterized in that: this gate control system frame hopping generation method comprises frame hopping terminal and access controller, corresponding several access controllers of frame hopping terminal, access controller is controlled one or several door control terminals; Wherein the frame hopping terminal has been installed the frame hopping generator program, has one group to generate the nonlinear algorithm of frame hopping and the cryptographic algorithm calling rule table of a corresponding access controller in program, and each period algorithm of corresponding each access controller is different; A decipherment algorithm calling rule table corresponding with the frame hopping terminal and the nonlinear algorithm of one group of password to decipher are wherein arranged in the decrypted program of access controller, and the algorithm of each period is consistent with the algorithm of frame hopping terminal; Frame hopping terminal and access controller are take the sequence number of current date time, access controller numbering and frame hopping generator program as independent variable, calculate current period frame hopping, compare with the frame hopping of input, carry out the mandate of corresponding gate inhibition's control terminal according to comparison result.

2. the gate control system frame hopping generation method that need not to communicate by letter according to claim 1, it is characterized in that: the frame hopping terminal is ordinary PC, panel computer or smart mobile phone.

Images